freshdesk-automation
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and displays Freshdesk ticket content (e.g., via FRESHDESK_VIEW_TICKET and FRESHDESK_LIST_ALL_TICKET_CONVERSATIONS), which are user-generated/untrusted third-party messages (ticket descriptions, customer replies supporting HTML) that the agent is expected to read and can materially influence follow-up actions like replies or ticket updates.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill requires contacting the Rube MCP server at https://rube.app/mcp at runtime (via RUBE_SEARCH_TOOLS) to fetch tool schemas that directly determine agent instructions and available actions, so this external endpoint can control prompts.
Audit Metadata